shield Security update for nodejs8

SUSE-SLE-Module-Web-Scripting-15-2018-1971

This update for nodejs8 to version 8.11.4 fixes the following issues: Security issues fixed: - CVE-2018-12115: Fixed an out-of-bounds memory write in Buffer that could be used to write to memory outside of a Buffer's memory space buffer (bsc#1105019) - Upgrade to OpenSSL 1.0.2p, which fixed: - CVE-2018-0732: Client denial-of-service due to large DH parameter (bsc#1097158) - ECDSA key extraction via local side-channel Other changes made: - Recommend same major version npm package (bsc#1097748) - Fix parallel/test-tls-passphrase.js test to continue to function with older versions of OpenSSL library.

• Release Date
  Sep 24 2018
• References
  Bugzilla: 1105019, 1097748, 1097158
  CVEs: CVE-2018-0732, CVE-2018-12115
• Type
  security
• Severity
  moderate

cloud_download Downloads

Web and Scripting Module 15 aarch64

• Packages
  nodejs8
  Evented I/O for V8 JavaScript

  8.11.4-3.8.2 lock rpm lock src

  nodejs8-devel
  Files needed for development of NodeJS platforms

  8.11.4-3.8.2 lock rpm

  nodejs8-docs
  Node.js API documentation

  8.11.4-3.8.2 lock rpm

  npm8
  Package manager for Node.js

  8.11.4-3.8.2 lock rpm

Web and Scripting Module 15 ppc64le

• Packages
  nodejs8
  Evented I/O for V8 JavaScript

  8.11.4-3.8.2 lock rpm lock src

  nodejs8-devel
  Files needed for development of NodeJS platforms

  8.11.4-3.8.2 lock rpm

  nodejs8-docs
  Node.js API documentation

  8.11.4-3.8.2 lock rpm

  npm8
  Package manager for Node.js

  8.11.4-3.8.2 lock rpm

Web and Scripting Module 15 s390x

• Packages
  nodejs8
  Evented I/O for V8 JavaScript

  8.11.4-3.8.2 lock rpm lock src

  nodejs8-devel
  Files needed for development of NodeJS platforms

  8.11.4-3.8.2 lock rpm

  nodejs8-docs
  Node.js API documentation

  8.11.4-3.8.2 lock rpm

  npm8
  Package manager for Node.js

  8.11.4-3.8.2 lock rpm

Web and Scripting Module 15 x86_64

• Packages
  nodejs8
  Evented I/O for V8 JavaScript

  8.11.4-3.8.2 lock rpm lock src

  nodejs8-devel
  Files needed for development of NodeJS platforms

  8.11.4-3.8.2 lock rpm

  nodejs8-docs
  Node.js API documentation

  8.11.4-3.8.2 lock rpm

  npm8
  Package manager for Node.js

  8.11.4-3.8.2 lock rpm